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Amendments to the Claims: 

This listing of Claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for control of usage of content, wherein 
protected content exists being usage restricted by one or more first usage rights 
specifying one or more usage restrictions and/or one or more usage permissions of the 
protected content at a user device, the method comprising the steps of: 

- obtaining at the user device a first content encryption key, 

- obtaining the content at the user device from the protected content in 
accordance With the one or more first usage rights by decrypting the protected content 
by [[a]] the first content encryption key in a first secure environment of the user device 
and by accessing the decrypted content in the first secure environment, 

- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more usage 
permissions of the content at a recipient device and the at least one defined usage right 
comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or more 
first usage rights, 

- generating at the user device integrity protection information for the at least one 
defined usage right, 

- encrypting the content with a content encryption key, 

- obtaining at the user device a key encryption key associated with the recipient 
device and/or an operator of the recipient device. 

- encrypting the content encryption key with [[a]] the key encryption key 
assoo i atod with th e r e cipiont devic e and/or an op e rator of the recip i ent d e v i c e, 

- communicating the encrypted content, the at least one defined usage right, the 
encrypted content encryption key, and the integrity protection information to the 
recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the recipient device, 
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- verifying at the recipient device the integrity of the at least one defined usage 
right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with a 
decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 

- using the content at the recipient device according to the applied at least one 
usage right, 

- r e str i ct i ng or b l ocking or d ele t i ng th e at l e ast on e d e fin e d usag e right at the 
r e cipi e nt d e vic e b e for e th e exp i ry of th e t e mporal restrict i on, 

- generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device before the expiry of the temporal restriction. 

- communicating an indication of the restricting or blocking or deleting from the 
recipient device to the user device, the indication comprising the at least one received 
usage right, 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the temporal 
restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires , whor oi n th e restricting or b l ocking or deleting st e p, th e 
second generating stop, the s e cond commun i cat i ng stop, tho s e cond apply i ng stop, and 
tho abolishing step aro ex e cuted i n soqu e nco on e aftor anoth e r . 

2-4. (Canceled) 

5. (Previously Presented) The method according to claim 1, further 
comprising the steps of 
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- recognizing by the user device that the at least one received usage right 
relates to the at least one defined usage right and 

- using the content at the user device according to the at least one first usage 
right even within the time upon the expiration of the temporal restriction. 

6. (Previously Presented) The method according to claim 1 , wherein the 
step of communicating the at least one defined usage right to the recipient device is 
executed by 

- communicating the at least one defined usage right from the user device to 
a rights server, 

- associating by the rights server the at least one defined usage right with 
authorization information indicating a rights issuer authorization for the at 
least one defined usage right to the recipient device, 

- communicating the at least one defined usage right and the authorization 
information from the rights server to the recipient device, 

and the recipient device verifies the rights issuer authorization based on the 
received authorization information. 

7. (Previously Presented) The method according to claim 1 further 
comprising the step of communicating to a charging server an indication about the 
communication of the at least one defined usage right. 

8. (Previously Presented) The method according to claim 1, wherein an 
input unit of the user device receives at least one instruction from a user for defining 
the at least one usage right. 

9. (Previously Presented) The method according to claim 1 further 
comprising the step of defining at least one further usage right for at least one further 
recipient device for controlling the usage of the content at the at least one further 
device. 
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1 0. (Currently Amended) A user device for controlling a usage of content 
at a recipient device, the user device comprising: 

at least a transmission unit and a processing unit and further a receiving 
unit, wherein protected content exists being usage restricted by one or more first 
usage rights specifying one or more usage restrictions and/or one or more usage 
permissions of the protected content at the user device, and 

the processing unit being adapted to obtain a first content encryption key 
and obtain the content from the protected content in accordance with the one or 
more first usage rights by decrypting the protected content with a first content 
encryption key in a first secure environment of the user device and by accessing the 
decrypted content in the first secure environment, to define at least one usage right 
specifying one or more usage restrictions and/or one or more usage permissions of 
the content at the recipient device, the at least one defined usage right comprising a 
temporal restriction, to verify that the at least one defined usage right is a subset of 
the one or more first usage rights, to generate integrity protection information for the 
at least one defined usage right, to encrypt the content with a content encryption 
key, to obtain a key encryption key associated with the recipient device and/or an 
operator of the recipient device, to encrypt the content encryption key with [[a]] the 
key encryption key assoc i at e d w i th th e rooip io nt dov i co and/or an operator of th e 
recipient d e vic e, the transmission unit being adapted to send the encrypted content, 
the at least one defined usage right, the encrypted content encryption key, and the 
integrity protection information to the recipient device, and the processing unit being 
adapted to restrict the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the recipient 
device, the receiving unit is adapted to receive an indication of a restricting or a 
blocking or a deleting of the at least one defined usage rights from the recipient 
device before the expiry of the temporal restriction, wherein the indication comprises 
at least one received usage right that is a subset of the at least one defined usage 
right, the processing unit is adapted to apply the at least one received usage right 
after the receipt of the indication from the recipient device until the expiry of the 
temporal restriction and to abolish the restriction of the one or more first usage rights 
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the when temporal restriction expires , wh o roin th e receiv i ng unit receiv e s th e 
i nd i cation of tho rostricting or tho blocking or tho do l oting of tho at l e ast ono defin e d 
uoag o rights, th e process i ng un i t appli e s tho at l oast ono roc o ivod usage r i ght unt il 
tho oxp i ry of tho t e mpora l r e str i ct i on and abo li shes th e restr i ction of th e on e or mor e 
f i rst usage r i ghts wh o n tempora l restrict i on exp i r e s in sequ e nc e ono aft e r another . 

11. (Previously Presented) The user device according to claim 10, the 
user device being adapted to load the protected content via a receiving unit and to 
store the protected content at a storage and/or to store pre-installed protected 
content at the storage. 

12-14. (Canceled) 

15. (Previously Presented) The user device according to claim 10, the 
user device being adapted to recognize that the at least one received usage right 
relates to the at least one defined usage right and to use the content according to 
the at least one first usage right even within the time upon the expiration of the 
temporal restriction. 

16. (Previously Presented) The user device according to claim 10, wherein 
the processing unit is adapted to generate an instruction for a rights server to 
associate the at least one defined usage right with authorization information 
indicating a rights issuer authorization for the at least one defined usage right to the 
recipient device and to communicate the at least one defined usage right and the 
authorization information to the recipient device, and the transmission unit is 
adapted send the instruction and the at least one defined usage right to the rights 
server. 

17. (Previously Presented) The user device according to claim 10, wherein 
the transmission unit is adapted to send to a charging server an indication about the 
communication of the at least one defined usage right to the recipient device. 
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18. (Previously Presented) The user device according to claim 10, the 
user device further comprising an input unit which is adapted to receive at least one 
instruction from a user and the processing unit is adapted to define the at least one 
usage right based on the at least one instruction from the user. 

19. (Previously Presented) The user device according to claim 10, wherein 
the processing unit is adapted to define at least one further usage right for at least 
one further recipient device for controlling the usage of the content at the at least 
one further recipient device. 

20. (Currently Amended) A recipient device for a controlled usage of 
content, the recipient device comprising at least a receiving unit and processing unit 
and further a transmission unit, wherein the receiving unit is adapted to receive the 
content being encrypted by a content encryption key, at least one defined usage 
right specifying one or more usage restrictions and/or usage permissions of the 
content and the at least one defined usage right comprising a temporal restriction, a 
content encryption key being encrypted by a key encryption key associated with the 
recipient device and/or an operator of the recipient device, and integrity protection 
information for the at least one defined usage right, the processing unit is adapted to 
verify the integrity of the at least one usage right based on the integrity protection 
information, to decrypt the encrypted content encryption key with a decryption key 
corresponding to the key encryption key, to decrypt the encrypted content with the 
content encryption key in a secure environment, to apply the at least one defined 
usage right to the content in the secure environment, and to use the content 
according to the applied at least one defined usage right, to r e strict or b l ock or de l et e 
tho at loast one d e f i ned usag e r i ght before th e tempora l restrict i on exp i r e s, to 
generate an indication of the restricting or the blocking or the deleting, to generate at 
least one received usage right that is a subset of the at least one defined usage right 
for the indication, to restrict or block or delete the at least one defined usage right 
before the temporal restriction expires, and the transmission unit is adapted to send 
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the indication comprising the at least one received usage right to the user device 7 
wher ei n tho roc i p i ont d o v i co restr i cts or blocks or dolotos tho at loast on e d e fin e d 
usago r i ghts, gen e rates th e i nd i cat i on of tho r e strict i ng or th e b l ocking or th e 
doloting, g o noratos th o at l oast one r e c ei v e d usag e right that is a subset of th e at 
loast on e dofinod usag e right for tho ind i cat i on, and s e nds th e i nd i cation compr i sing 
th e at le ast ono rece i v e d usag e right to th e us e r d e v i c e i n sequ e nc e on e aft e r 

21. (Previously Presented) The recipient device according to claim 20, 
wherein the processing unit is adapted to generate an alert if the integrity of the at 
least one defined usage right is violated and to initiate an indication of the alert at an 
output unit. 

22-23. (Canceled) 

24. (Previously Presented) The recipient device according to claim 20, 
wherein the receiving unit is adapted to receive the at least one defined usage right 
and associated authorization information indicating a rights issuer authorization from 
a rights server and the processing unit is adapted to verify the rights issuer 
authorization based on the received authorization information. 

25 -28 (Canceled) 



29. (Currently Amended) A method for control of usage of content, wherein 
protected content exists being usage restricted by one or more first usage rights 
specifying one or more usage restrictions and/or one or more usage permissions of the 
protected content at a user device, the method comprising the steps of; 

- obtaining at the user device a first content encryption key. 

- obtaining the content at the user device from the protected content in 
accordance with the one or more first usage rights by decrypting the 
protected content by a first content encryption key in a first secure 
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environment of the user device and by accessing the decrypted content in the 
first secure environment, 

- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more 
usage permissions of the content at a recipient device and the at least one 
defined usage right comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or 
more first usage rights, 

- generating at the user device integrity protection information for the at least 
one defined usage right, 

- encrypting the content with a content encryption key, 

- obtaining at the user device a key encryption key associated with the 
recipient device and/or an operator of the recipient device. 

- encrypting the content encryption key with [[a]] the key encryption key 
assoc i at e d with th e recipient dev i c e and/or an operator of tho roo i pient 

- communicating the encrypted content, the at least one defined usage right, 
the encrypted content encryption key, and the integrity protection information 
to the recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the 
recipient device, 

- verifying at the recipient device the integrity of the at least one defined 
usage right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with 
a decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 
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- using the content at the recipient device according to the applied at least 
one usage right, 

rostrict i ng or b l ocking or d e l e t i ng tho at loast ono def i ned usag e right at th e 
recipi e nt dev i c e b e fore th e e xpiry of th e t e mpora l restr i ction, 

- generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- restricting or blocking or deleting the at least one defined usage right at the 
recipient device before the expiry of the temporal restriction, 

- communicating an indication of the restricting or blocking or deleting from 
the recipient device to the user device, the indication comprising the at least 
one received usage right, without returning the encrypted content to the user 
device, 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the 
temporal restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires , wh e r ei n th e r e str i ct i ng, b l ocking or d ele t i ng st e p, 
th e second g e n e rat i ng stop, th e s e cond commun i cat i ng st e p, th e s e cond 
app l y i ng st e p, and th e abo li shing st e p ar e e x e cut e d i n sequenc e on e aft e r 

30. (New) A method for control of usage of content, wherein protected 
content exists being usage restricted by one or more first usage rights specifying one or 
more usage restrictions and/or one or more usage permissions of the protected content 
at a user device, the method comprising the steps of 

- obtaining at the user device a first content encryption key, 

- obtaining the content at the user device from the protected content in 
accordance with the one or more first usage rights by decrypting the protected content 
by [[a]] the first content encryption key in a first secure environment of the user device 
and by accessing the decrypted content in the first secure environment, 
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- defining at least one usage right at the user device, the at least one defined 
usage right specifying one or more usage restrictions and/or one or more usage 
permissions of the content at a recipient device and the at least one defined usage right 
comprising a temporal restriction, 

- verifying that the at least one defined usage right is a subset of the one or more 
first usage rights, 

- generating at the user device integrity protection information for the at least one 
defined usage right, 

- encrypting the content with a content encryption key, 

- obtaining at the user device a key encryption key associated with the recipient 
device, 

- encrypting the content encryption key with [[a]] the key encryption key 
associated with the recipient device and/or an operator of the recipient device, 

- communicating the encrypted content, the at least one defined usage right, the 
encrypted content encryption key, and the integrity protection information to the 
recipient device, 

- restricting the one or more first usage rights in consequence of the definition 
and/or the communication of the at least one defined usage right to the recipient device, 

- verifying at the recipient device the integrity of the at least one defined usage 
right based on the integrity protection information, 

- decrypting at the recipient device the encrypted content encryption key with a 
decryption key corresponding to the key encryption key, 

- decrypting the encrypted content with the content encryption key in a secure 
environment of the recipient device, 

- applying the at least one defined usage right to the content in the secure 
environment, 

- using the content at the recipient device according to the applied at least one 
usage right, 

- restricting or blocking the at least one defined usage right at the recipient device 
before the expiry of the temporal restriction, 
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- generating by the recipient device at least one received usage right that is a 
subset of the at least one defined usage right, 

- communicating an indication of the restricting or blocking from the recipient 
device to the user device, the indication comprising the at least one received usage 
right, 

- applying the at least one received usage right at the user device after the 
receipt of the indication from the recipient device until the expiry of the temporal 
restriction, and 

- abolishing the restriction of the one or more first usage rights when the 
temporal restriction expires, wherein the restricting or blocking step, the second 
generating step, the second communicating step, the second applying step, and the 
abolishing step are executed in sequence one after another. 
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